Smita Sompalli Email & Phone Number

Memphis, Tn, Us

Memphis, Tn, Us

Memphis, Tennessee, United States

Provide leadership, strategic direction, consultation, analysis, coordination, and guidance for Shelby County Information Technology activities with regard to the planning, analysis, design, development, installation, integration, and maintenance of software applications and online systems.

Memphis Metropolitan Area

 As head of applications development, provide hands-on technical expertise in technology automation, implementation, integration and deployment.  Serves as the subject matter expert for applications security.. Secondary CISO role for IT Operations for Shelby County government. Accountable for deployment of new enterprise information systems and software applications; including, maintenance of existing systems. Provide management and oversight from product evaluation-to-launch while ensuring key objectives are met (compliance, legal, technical, OWASP guidelines, functional and technical requirements etc.). Accountable for Enterprise GIS Applications development and credit card processing programs for County. Manage a team of 32 programmers, consultants, and project leads; provide team and cross-departmental leadership to ensure smooth product integration and coordinated service delivery across the enterprise. Determines appropriate balance of impact, financial and human capital costs, and risk within proposed IT enterprise applications to informed decisions regarding level of effort and priority of processing for IT projects and processes. Provide senior leadership, external oversight bodies, IT Steering committee and Subcommittee's with critical project deployment updates and address concerns. Prepare and deliver sectional budgets; assist in preparation of department budget. Negotiate vendor contracts and provide project leadership to ensure on-time and budget delivery.

Memphis Metropolitan Area

 Successfully delivered an information security strategy for a highly complex public administration landscape. Appointed by Shelby County Mayor to oversee county-wide implementation of information security strategy, assets, implementation, standards, policies and procedures. Lead strategic security planning to achieve organizational goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future security technologies using a risk-based assessment methodology. Assisted with the design and implementation of disaster recovery and business continuity plans, procedures, audits, and enhancements. Developed, implemented, maintained, and oversaw enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices. Trained and supervised IT Security resources, performed periodic risk assessments, executed PCI Compliance program, reviewed HIPAA and related health information security standards, monitored division budget, led security projects, advised stakeholders, while being accountable for procurement and deployment of key assets.  Provided security services that included: enterprise risk assessment (hardware and software), employee awareness and training, business process reviews, ISA/PCI Compliance implementation and mitigation strategies, network control systems audits (firewalls, IPS, routers etc.), incident response strategies, policies, standards, controls, and overall project management.

 Provided security services that included: enterprise risk assessment (hardware and software), employee awareness and training, business process reviews, ISA/PCI Compliance implementation and mitigation strategies, network control systems audits (firewalls, IPS, routers etc.), incident response strategies, policies, standards, controls, and overall project management.

Memphis Metropolitan Area

 Designed, maintained, and administered HP NonStop (Tandem) databases that supported critical county applications in the public safety domain. In addition, supported application development staff with Oracle and SQLServer databases administration activities. Mission critical applications included: Motor Vehicle Registration, Jail Management System, Court Systems, Payroll, Finance, Business Tax, Inmate Management System, Child Support Services, and Mental Health. Routine database administration duties included: creation and maintenance of DDLs, disk utilization monitoring, table growth monitoring, SQL system performance monitoring, creation of views/indexes/table partitions, data imports/exports via ODBC, TACL macros, and SQL performance tuning.

Greater Memphis Area

 Managed the implementation of County Assessor’s Internet web site (www.assessor.shelby.tn.us). Performed full life cycle deployment using ASP/SQL Server 2000, while converting legacy code from PERL. Worked on GIS-enabled website for distributing high-end geographic information systems and mapping services via the Internet using ArcIMS. Developed a comprehensive systems management methodology for all major projects. Framework deliverables incorporated: Envisioning, Analysis, Design, Pseudo-Code, and Development Standards & Guidelines. Detailed deliverables included: Feasibility Study, AS-IS Business Process and AS-IS Infrastructure Overview(s), Business Case, Work plans, Change Control Procedures, Developers Guide, Training Strategy, Data Conversion Strategy, Reporting Strategy, Unit/System/Acceptance Testing Standards, Migration Strategy, and Interface/Report Development Guidelines. Performed data analysis to determine the Financial Impact Summary by Municipality. This included programming, configuration of reports, statistical analysis, import/exports of data for further analysis by the Shelby County Assessor’s office personnel. Responsible for managing the re-appraisal IT team. Scope included programming, configuration of reports, import/export of appraisal data into the CAMA system, addressing correction for assessment notices and mailing of assessment notices to property owners.

Deliver advisory and management consulting services to both public and privately held corporations in the area of Cybersecurity and IT Operations. Recognized Cybersecurity expert and trusted advisor, often sought out by senior leadership, to rapidly assess risks and deploy operational solutions, and to meet various industry compliance requirements. Validate customer’s architectures meet industry standards such as PCI DSS, HIPAA, HITRUST, FedRAMP, and NIST/DoD frameworks. Carry out vulnerability assessment and penetration testing for organizational internal and external networks for security compliance.  Review technical reports and provide risk mitigation solutions from activities such as Penetration Testing, Vulnerability Management, Wi-Fi testing and/or web-based application assessments. Assess security controls for enterprise applications.  Perform PCI validation for level 3 and level 2 clients. Manage PCI client engagements, including but not limited to: performing scoping and gap assessments, providing technical advisory / remediation consulting, compliance maintenance program management, and conducting formal PCI (ROC) assessments. Participate in baseline and maturity assessments based on other security frameworks, risk assessments and security architecture review. Provide guidance on PCI Compliance as new business solutions around the world are being evaluated, designed, and deployed.  Manage a wide range of HITRUST audit engagements.  Work with industry and standards bodies to provide technical expertise on cloud technology. Lead teams to help partners and customers understand the opportunities for cloud technology to handle security and compliance requirements in key market verticals and regulated industries, such as financial services, healthcare, life sciences, and energy.  Deliver oral/written presentations and risk reporting to all levels of corporate management, including: CIO, CFO, and COO.

Greater Memphis Area

Department Of Arts And Sciences

Master Of Science (M.S.), Computer Science

Bachelor Of Engineering - Be, Biomedical Engineering